Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa
File:                     323830343a3639383a3a2f33322d3438203d3e203238353733.roa (raw, json)
Hash identifier:          filz0DhLOXfv7g8OXaIXA8BcPRymHGdV7byHBrnc5Wo=
Subject key identifier:   0D:EB:C3:A8:E2:EC:38:4F:E7:C6:61:F7:B2:AE:56:99:1E:82:E9:D8
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       573CCEAC855217E9587D0DF210F2E0498173A84D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     28573
IP address blocks:        2804:698::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
                          rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:ce:ac:85:52:17:e9:58:7d:0d:f2:10:f2:e0:49:81:73:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4b:fb:20:a4:3c:be:e8:c7:c1:11:41:95:43:
                    ea:a1:67:72:b3:1d:c4:9e:a2:b0:b6:d0:02:a0:2b:
                    e2:db:67:58:ed:fe:e8:da:3b:7e:0a:db:dd:57:e0:
                    7f:ed:07:16:d3:07:5f:50:1b:74:a8:71:26:72:65:
                    99:d2:c1:78:48:d8:43:7e:d5:b7:65:e8:41:11:50:
                    72:2f:6e:81:a8:f6:64:a8:7f:77:80:1b:29:1a:46:
                    0f:34:86:19:f9:10:27:1f:3d:a5:16:60:74:50:08:
                    2e:fa:ae:cc:25:52:d5:0f:59:de:16:bb:60:5c:d8:
                    e0:63:77:7b:c2:53:cc:a2:40:8b:db:50:c3:7d:72:
                    84:fd:b0:57:07:f1:a0:a4:a7:47:88:91:54:15:42:
                    b0:8a:1f:c2:2f:b7:88:c2:33:5d:e5:3b:d3:24:ca:
                    31:be:24:a0:02:9d:b8:14:73:3f:df:80:29:42:95:
                    e3:8b:ba:63:8a:94:ac:06:03:b5:86:a5:59:38:f5:
                    75:51:3b:09:f3:0a:fb:b3:17:90:60:38:4b:4f:4e:
                    11:79:9e:88:13:86:4c:48:9c:b8:34:e9:74:2d:d2:
                    e0:91:02:20:6a:40:81:c5:c1:e7:1d:e8:18:9e:05:
                    97:7f:03:86:2c:a7:a3:81:34:ac:cc:c3:4f:85:03:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:C3:A8:E2:EC:38:4F:E7:C6:61:F7:B2:AE:56:99:1E:82:E9:D8
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3639383a3a2f33322d3438203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:698::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:75:cb:a2:e0:a3:15:a3:a9:f3:58:66:55:2d:be:1d:e3:
         b3:91:05:b4:56:91:7e:bb:d6:e3:22:24:74:d2:c2:02:71:e4:
         45:02:70:fe:6f:e9:28:4d:cc:07:3e:23:5f:b2:64:30:99:ec:
         a3:ba:be:34:bc:38:4b:48:b7:10:0f:a0:72:ad:b3:de:ee:54:
         8a:c9:1b:7c:4e:01:d1:63:fd:d9:aa:79:e0:c4:2d:3a:2d:2f:
         85:32:6a:ee:6e:e8:3e:f9:be:6e:58:34:37:f8:00:a9:22:30:
         b2:b2:20:56:d9:b0:d1:85:9e:20:42:61:61:33:da:c8:e9:e7:
         e6:a1:c8:ba:d4:1d:33:9a:cb:5d:7c:a1:cd:1a:d9:c8:03:56:
         81:a7:ef:44:52:37:96:c1:a2:66:b0:2a:ed:73:29:2e:7a:84:
         1a:e4:7d:f6:84:4c:54:ac:5f:3b:78:63:98:0b:ed:8e:6d:57:
         f2:61:4b:91:d5:00:53:79:4c:e4:31:e5:c9:19:f3:df:3b:2c:
         7d:4a:5d:d7:ca:a3:7a:82:00:71:5f:bc:68:ea:3d:e1:9a:8e:
         65:96:35:c4:35:db:d3:ec:bb:ac:e3:5c:91:30:93:2a:d2:3c:
         c4:81:fb:b4:b0:c4:7c:ac:99:ad:5a:af:87:fb:e2:24:80:73:
         0c:40:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:06 2026 by rpki-client